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In H A. Silverberg, using the main theorem of complex multiplication of Shimura 
and Taniyama, has obtained a bound for the order of a point of finite order in 
a CM abelian variety over a number field in terms of only the degree of the 
number field and the dimension of the abelian variety. As a corollary she obtains 
the following result for elliptic curves: Let E be an elliptic curve over a number 
field K of degree d with CM by an order O in an imaginary quadratic field 
k. Suppose P G E(K) is a point of order N. Then <p(N) < 5 [id where \x is 
the number of roots of unity in D and 5 = 1/2 or 1 depending on whether 
k is contained in K or not. Her results also imply a bound on the full torsion 
subgroup of CM elliptic curves. 

The aim of this paper is to give an estimate on the order of the torsion 
subgroup of a CM elliptic curve over a number field using only the result of 
Deuring about supersingular primes, and elementary algebraic number theory. 
To state our theorem, we need the following notation: if M = • ■ ■ P r r is the 
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prime factorisation of M let M' = l^ +6l >' 1 . . . where 5. = if £ is 

even and 5i — 1 if jj is odd. 

Theorem 1.1 /_et be an elliptic curve over a number field K of degree d with 
CM by an order in an imaginary quadratic field k. Then if M is the order of the 
torsion subgroup of E(K) we have: 

1. <p(M) < 2d if K H k = Q, 

2. (p(M') < 2d ifk C K but k ^ Q(i), Q(lu), (lu being a third root of unity). 

When k = Q(i),Q(u>) our method gives an extra factor of 2 d ^ M "> +l where 
d(M) is the number of distinct prime divisors of M. 

Remark 1 : A. Silverberg has remarked that one can easily give an estimate 
to the order of the full torsion subgroup of a CM elliptic curve which is the same 
as our case (2) from her theorem in [9]. Her estimate is better than ours in 
case [ii). In case (i), this follows as the torsion subgroup on an elliptic curve 
is always of the form Z/a x Z/b where a\b. If the torsion subgroup of E(K) 
contains Z/r x Z/r for r > 2, it follows from [10] that the field of complex 
multiplication (= k) must be contained in K. Therefore if Knk — Q, then the 
torsion subgroup is either Z/N or Z/N x Z/2, where N is the maximum order 
of a torsion point, achieving the same bound that we obtain for the order of the 
torsion subgroup of E(K) from the maximal order of a torsion element. 

There is a large amount of literature on the torsion subgroup of elliptic curves 
over number fields. In [|J Merel has shown that the order of the torsion subgroup 
of an elliptic curve over a number field K can be bounded in terms of only the 
degree, d, of K over Q. The bound thus obtained (first by Merel and then 
improved by Oesterle ) is exponential in d. The initial motivation for this note 
was to investigate as to what could be the 'right bound' by looking at the CM case 
when we discovered that Silverberg has already done this. We also refer to the 
paper of Olson [8] which deals with elliptic curves with complex multiplication. 

Acknowledgement: We are grateful to Prof. J. Oesterle whose wonderful 
lectures on Merel's work and his own refinement at the Mehta Research Institute 
and at the ICTP, Trieste, stimulated our interest in working out the CM case. 
We are grateful to Prof. J. Alperin for providing us with the proof of Lemma 
2.3 and to Prof. A. Silverberg for remark 1. This work was done while the sec- 
ond author was visiting Mehta Research Institute whose hospitality he gratefully 
acknowledges. 
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2 Preliminary Lemmas 



Lemma 2.1 Let k be a quadratic extension of Q and K an extension of Q of 
degree d with K Ok — Q. Then the set of primes p in Q which remain inert in 
k and have the property that there is at least one prime of degree 1 in K above 
p is of density at least l/(2d). 

Proof: Let L be a Galois extension of Q containing K and k, and let G = 
Gal(L/Q). Further let H K and H k be the subgroups of G corresponding to the 
subfields K and k, respectively, of L. It is easy to see that the set of prime ideals 
p in L, such that the prime ideal p fl K is of degree 1 are precisely those for 
which the corresponding Frobenius element a in G belongs to Hk- The prime 
p = p fl Q is inert in k if and only if a does not belong to H k . So, the primes p 
in Q as desired in the lemma are precisely those for which there is a prime p in 
L above p for which the Frobenius element belongs to (G\H k ) C\H K . Since the 
cardinality of (G \ H k ) D Hk is \Hk\/2, it follows from the Cebotarev density 
theorem that the density of p in Q as desired in the lemma is at least l/(2d). 
□ 

Lemma 2.2 Let K be a number field of degree d containing an imaginary 
quadratic field k. Then the set of primes p in Q which are inert in k and 
have a prime of degree 2 in K over p is of density at least 1/d. 

Proof: Let L be a Galois extension of Q containing K and G = Gal(L/Q). 
Further let Hk and H k be the subgroups of G corresponding to the subfields 
K and k, respectively, of L. The set of primes p as desired in the lemma are 
precisely those for which the corresponding Frobenius substitution a does not 
belong to H k but whose square is in H K . Since k is imaginary quadratic, the 
complex conjugation does not belong to H k . The following lemma combined 
with the Cebotarev density theorem completes the proof of our lemma. □ 

Lemma 2.3 Let G be a finite group, N a subgroup of G of index 2 in G and 
H a subgroup of N. Suppose that there is an element of order 2, say c, in G 
which is not in N. Then the set of elements in G which do not belong to N but 
whose square belongs to H has cardinality at least that of H. 
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Proof: (due to J. Alperin) We need to count elements n ■ c with n E N whose 
square belongs to H. Clearly HcH is a subset of NcN = Nc. We will prove 
that there are exactly \H\ elements in HcH whose square belongs to H which 
will prove our lemma. To prove this let A = H fl cHc^ 1 , and let X C H be a 
set of left coset representatives of A in H so that every element of H can be 
written uniquely in the form x ■ a with x E X and a E A. From this it is easy 
to see that an element of HcH can be uniquely written in the form xch with 
x E X, h E H . Now (xch) 2 = xchxch belongs to H if and only if chxc belongs 
to H which happens if and only if hx belongs to cHc~ x . Since both x and h 
belongs to H, we find that (xch) 2 belongs to H if and only if hx belongs to 
A = H fl cHc^ 1 . For each x, this means that h belongs to Ax" 1 . So for each 
x, there are \A\ many choices for h such that (xch) 2 belongs to H. Therefore 
the total number of elements in HcH whose square belongs to H is 

M-g = l*l, 

proving the lemma. □ 



3 Proof of the main theorem 

The proof of our main theorem will be a simple consequence of the lemmas in 
the previous section, Cebotarev density theorem, and the well known theorem 
about elliptic curves with complex multiplication that a prime p in K which is 
a prime of good reduction for E over K is a prime of supersingular reduction if 
and only if p fl Q = p is inert or ramified in k (see [|J). 

Case 1: K D k = Q. We consider the set of rational primes p coprime to M 
which are inert in k and have a split factor in K, i.e., there is a prime of degree 1, 
say p in K which divides p. Denote by F p the residue field associated to the prime 
ideal p of K. Then the torsion subgroup of E over K will inject into Ep(F p ) 
which has cardinality p + 1 since p is a prime of supersingular reduction of E and 
F p is a finite field with p elements; hence M\(p + 1). By Lemma 2.1 the density 
of such primes p is at least l/(2d) whereas by Cebotarev density theorem, the 
density of primes p which are congruent to —1 modulo M is l/cp(M). Therefore 
we must have 1/(2(2) < l/<p(M) and so cp(M) < 2d. 

Case 2: k C K. We consider primes p in Q such that p is inert in k and 
has a prime factor p of degree 2 in K which is a prime of good reduction of 
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E. The elliptic curve will have supersingular reduction at such primes. The 
density of such primes is 1/d from lemma 2.2. Since F p is a finite field of 
order p 2 , \E P (F P )\ = 1 + p 2 + a p where a p = 0, ±p, ±2p. The possibilities 
a p = 0,±p arises only for k = Q(i) and k = Q(cj) respectively which we have 
omitted. Therefore we find that |E P (F P )| is either (p + l) 2 or (p — l) 2 . Hence 
p is congruent to either 1 or —1 modulo M'. The density of such primes p is 
2/(p(M'), and as before we get 

1 2 

d ~ <p(M'y 

or (p(M') < 2d completing the proof of the theorem. 

Remark 2: The technique of using supersingular primes can be used in some 
situations to get better bounds for the order of the torsion subgroup when K, 
the field of definition of E, is a non-normal extension. For instance, if L is a 
Galois extension of Q with Galois group GL 2 (F q ) which is disjoint from the 
field of CM, k, and K is the fixed field of the diagonal torus, then [K : Q] = 
q(q + 1). The set of primes p in Q with the property that there is a prime p in 
K of degree 1 above p corresponds to those Frobenius substitutions in GL 2 (F 9 ) 
which have a conjugate which is diagonalisable over F q . The set of elements in 
GL 2 (F q ) which are diagonalisable over F q can be easily seen to be of cardinality 
[(q — 2)(q — l)q(q + l)]/2 + (q — 1). Therefore the set of primes p which are 
inert in k and have a prime in K of degree 1 above p is roughly of density 
1/4. By the arguments in theorem 1.1 this implies that the torsion in E(K) is 
bounded by M with y?(M) < 4, implying that the set of possible values of M 
is {1,2,3,4,5,6,8}, instead of the much larger bound depending on q coming 
from theorem 1.1. 

4 A conjecture about torsion 

In this section we make a few general remarks and state a conjecture on the 
bound for the order of a torsion point of an elliptic curve defined over a number 
field. 

Let X be a curve over Q of genus > 2. Let d be the gonality of X, i.e., d is 
the minimal integer among the degrees of maps from X to P 1 and assume that 
d is realised for a map tt defined over Q. It is clear that any element x of X(Q) 
with ir(x) E P 1 (Q) is defined over a number field of degree < d and therefore 
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there are infinitely many points in X(Q) defined over number fields of degree 
< d. Conversely, it has been proved by Debarre and Klassen in that if X is 
a smooth plane curve then d is the maximal integer with the property that the 
number of points in X(Q) defined over a number field of degree < d is finite. 
We would like to believe that a suitably modified version of their theorem is valid 
also for modular curves X (N) and X 1 (N). More precisely, we believe that these 
modular curves have no points, except for cusps, defined over an extension of Q 
of degree < Bd, B a constant independent of N. 

It has been proved in [|J that the gonality of X (N) (resp. X±(N)) is at 
least a constant times the degree of the standard map of X (N) to P 1 ; in 
fact, d > (7/800)iV (a similar bound but quadratic in N for X^N)). Earlier 
heuristics therefore lead us to the following. 

Conjecture: Let E be an elliptic curve defined over a number field K with a 
torsion point of order N in E(K). Then there is a constant C independent of 
E and K such that cp(N) < C[K : Q]. 
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